Early on October 31, analysts at security firm PeckShield warned of a flaw in Unibot, a crypto bot on Telegram. The latter has finally confirmed the half-million-dollar hack and assures a full refund to those harmed.
A $580,000 hack for Unibot
As is often the case, it was Peckshield that sounded the alarm on this attack. Early this morning, the cryptocurrency security firm revealed that a Unibot smart contract had been exploited, enabling the attacker to steal around $580,000.
This information was quickly confirmed by the Unibot team on their X account (ex-Twitter), specifying that the flaw would come from the smart contract of their new router:
We experienced a token approval exploit from our new router and have paused our router to contain the issue.
Any funds lost due to the bug on our new router will be compensated. Your keys and wallets are safe.
We will release a detailed response after investigations conclude.
– Unibot (@TeamUnibot) October 31, 2023
First and foremost, the Unibot team has assured that “funds lost due to the new router bug will be compensated”, also adding that users’ wallets are now safe.
What’s more, the new router’s smart contract was probably deployed just a few days before the hack. In other words, only the most active users were affected, which also explains why the amounts involved were not too large.
The market reaction was swift, with the price of the Unibot token falling significantly. The UNIBOT fell by 30% in the space of a few hours, stabilizing at around $41.
For your information, Unibot is a crypto bot on Telegram dedicated to performing numerous operations. It will create a wallet for you to interact with the blockchains or protocols you’re interested in, which you feed yourself, and then perform the tasks for you.
